Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Oracle Fusion Middleware Identity Manager REST Web Services Unauthenticated Takeover Vulnerability
Vulnerability
An easily exploitable vulnerability has been identified in the Identity Manager component of Oracle Fusion Middleware, specifically in versions 12.2.1.4.0 and 14.1.2.1.0. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Identity Manager. Successful exploitation can lead to a complete takeover of the Identity Manager.
Impact
Exploitation of this vulnerability can result in unauthorized takeover of the Identity Manager, allowing an attacker to gain control over the application and its functionalities.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.